PT-2021-23594 · WordPress · Wordpress Popular Posts

🗓️ 17 Nov 2021 00:00:00Reported by Positive TechnologiesType

WordPress Popular Posts up to 5.3.2 allows arbitrary file uploads via Image.php, risking remote code execution; update.

Reporter	Title	Published	Views	Family All 16
0day.today	WordPress Popular Posts 5.3.2 Remote Code Execution Exploit	20 Dec 202100:00	–	zdt
Circl	CVE-2021-42362	17 Nov 202120:14	–	circl
CNNVD	WordPress 代码问题漏洞	17 Nov 202100:00	–	cnnvd
CNVD	WordPress plugin Popular Posts arbitrary file upload vulnerability	19 Nov 202100:00	–	cnvd
Check Point Advisories	WordPress Popular Posts Plugin Arbitrary File Upload (CVE-2021-42362)	7 Mar 202200:00	–	checkpoint_advisories
CVE	CVE-2021-42362	17 Nov 202117:44	–	cve
Cvelist	CVE-2021-42362 WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload	17 Nov 202117:44	–	cvelist
Exploit DB	WordPress Plugin Popular Posts 5.3.2 - Remote Code Execution (RCE) (Authenticated)	15 Jul 202100:00	–	exploitdb
Metasploit	Wordpress Popular Posts Authenticated RCE	20 Dec 202117:42	–	metasploit
NVD	CVE-2021-42362	17 Nov 202118:15	–	nvd

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_popular_posts_rce.rb
blog	www.blog.nintechnet.com/improper-input-validation-fixed-in-wordpress-popular-posts-plugin
packetstormsecurity	www.packetstormsecurity.com/files/165376/WordPress-Popular-Posts-5.3.2-Remote-Code-Execution.html
exploit-db	www.exploit-db.com/exploits/50129
github	www.github.com/cabrerahector/wordpress-popular-posts/commit/d9b274cf6812eb446e4103cb18f69897ec6fe601
plugins	www.plugins.trac.wordpress.org/changeset/2542638/wordpress-popular-posts/trunk/src/Image.php
osv	www.osv.dev/vulnerability/CVE-2021-42362
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-42362
t	www.t.me/cvenotify/61034
wordfence	www.wordfence.com/vulnerability-advisories/

16 Sep 2024 00:00Current

9.7High risk

Vulners AI Score9.7

CVSS 3.18.8

CVSS 26.5

EPSS0.82414